diff --git a/server/AyaNova/Controllers/ContractController.cs b/server/AyaNova/Controllers/ContractController.cs
new file mode 100644
index 00000000..c0a42291
--- /dev/null
+++ b/server/AyaNova/Controllers/ContractController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class ContractController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<ContractController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public ContractController(AyContext dbcontext, ILogger<ContractController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full Contract object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single Contract</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetContract([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            ContractBiz biz = ContractBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) Contract
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutContract([FromRoute] long id, [FromBody] Contract inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            ContractBiz biz = ContractBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) Contract
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchContract([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<Contract> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            ContractBiz biz = ContractBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post Contract
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostContract([FromBody] Contract inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            ContractBiz biz = ContractBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            Contract o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(ContractController.GetContract), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate Contract
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateContract([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            ContractBiz biz = ContractBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            Contract o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(ContractController.GetContract), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete Contract
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteContract([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            ContractBiz biz = ContractBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/HeadOfficeController.cs b/server/AyaNova/Controllers/HeadOfficeController.cs
new file mode 100644
index 00000000..242b98b1
--- /dev/null
+++ b/server/AyaNova/Controllers/HeadOfficeController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class HeadOfficeController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<HeadOfficeController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public HeadOfficeController(AyContext dbcontext, ILogger<HeadOfficeController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full HeadOffice object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single HeadOffice</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetHeadOffice([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            HeadOfficeBiz biz = HeadOfficeBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) HeadOffice
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutHeadOffice([FromRoute] long id, [FromBody] HeadOffice inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            HeadOfficeBiz biz = HeadOfficeBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) HeadOffice
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchHeadOffice([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<HeadOffice> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            HeadOfficeBiz biz = HeadOfficeBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post HeadOffice
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostHeadOffice([FromBody] HeadOffice inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            HeadOfficeBiz biz = HeadOfficeBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            HeadOffice o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(HeadOfficeController.GetHeadOffice), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate HeadOffice
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateHeadOffice([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            HeadOfficeBiz biz = HeadOfficeBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            HeadOffice o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(HeadOfficeController.GetHeadOffice), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete HeadOffice
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteHeadOffice([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            HeadOfficeBiz biz = HeadOfficeBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/LoanUnitController.cs b/server/AyaNova/Controllers/LoanUnitController.cs
new file mode 100644
index 00000000..25d6217b
--- /dev/null
+++ b/server/AyaNova/Controllers/LoanUnitController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class LoanUnitController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<LoanUnitController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public LoanUnitController(AyContext dbcontext, ILogger<LoanUnitController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full LoanUnit object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single LoanUnit</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetLoanUnit([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            LoanUnitBiz biz = LoanUnitBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) LoanUnit
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutLoanUnit([FromRoute] long id, [FromBody] LoanUnit inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            LoanUnitBiz biz = LoanUnitBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) LoanUnit
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchLoanUnit([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<LoanUnit> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            LoanUnitBiz biz = LoanUnitBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post LoanUnit
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostLoanUnit([FromBody] LoanUnit inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            LoanUnitBiz biz = LoanUnitBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            LoanUnit o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(LoanUnitController.GetLoanUnit), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate LoanUnit
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateLoanUnit([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            LoanUnitBiz biz = LoanUnitBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            LoanUnit o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(LoanUnitController.GetLoanUnit), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete LoanUnit
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteLoanUnit([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            LoanUnitBiz biz = LoanUnitBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/PMController.cs b/server/AyaNova/Controllers/PMController.cs
new file mode 100644
index 00000000..148d7d66
--- /dev/null
+++ b/server/AyaNova/Controllers/PMController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class PMController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<PMController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public PMController(AyContext dbcontext, ILogger<PMController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full PM object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single PM</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetPM([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMBiz biz = PMBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) PM
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutPM([FromRoute] long id, [FromBody] PM inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            PMBiz biz = PMBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) PM
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchPM([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<PM> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMBiz biz = PMBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post PM
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostPM([FromBody] PM inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMBiz biz = PMBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            PM o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMController.GetPM), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate PM
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicatePM([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMBiz biz = PMBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            PM o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMController.GetPM), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete PM
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeletePM([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMBiz biz = PMBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/PMItemController.cs b/server/AyaNova/Controllers/PMItemController.cs
new file mode 100644
index 00000000..ec152910
--- /dev/null
+++ b/server/AyaNova/Controllers/PMItemController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class PMItemController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<PMItemController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public PMItemController(AyContext dbcontext, ILogger<PMItemController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full PMItem object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single PMItem</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetPMItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMItemBiz biz = PMItemBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) PMItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutPMItem([FromRoute] long id, [FromBody] PMItem inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            PMItemBiz biz = PMItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) PMItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchPMItem([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<PMItem> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMItemBiz biz = PMItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post PMItem
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostPMItem([FromBody] PMItem inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMItemBiz biz = PMItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            PMItem o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMItemController.GetPMItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate PMItem
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicatePMItem([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMItemBiz biz = PMItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            PMItem o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMItemController.GetPMItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete PMItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeletePMItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMItemBiz biz = PMItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/PMTemplateController.cs b/server/AyaNova/Controllers/PMTemplateController.cs
new file mode 100644
index 00000000..6587d926
--- /dev/null
+++ b/server/AyaNova/Controllers/PMTemplateController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class PMTemplateController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<PMTemplateController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public PMTemplateController(AyContext dbcontext, ILogger<PMTemplateController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full PMTemplate object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single PMTemplate</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetPMTemplate([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMTemplateBiz biz = PMTemplateBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) PMTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutPMTemplate([FromRoute] long id, [FromBody] PMTemplate inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            PMTemplateBiz biz = PMTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) PMTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchPMTemplate([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<PMTemplate> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMTemplateBiz biz = PMTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post PMTemplate
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostPMTemplate([FromBody] PMTemplate inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMTemplateBiz biz = PMTemplateBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            PMTemplate o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMTemplateController.GetPMTemplate), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate PMTemplate
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicatePMTemplate([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMTemplateBiz biz = PMTemplateBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            PMTemplate o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMTemplateController.GetPMTemplate), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete PMTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeletePMTemplate([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMTemplateBiz biz = PMTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/PMTemplateItemController.cs b/server/AyaNova/Controllers/PMTemplateItemController.cs
new file mode 100644
index 00000000..c6a80e16
--- /dev/null
+++ b/server/AyaNova/Controllers/PMTemplateItemController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class PMTemplateItemController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<PMTemplateItemController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public PMTemplateItemController(AyContext dbcontext, ILogger<PMTemplateItemController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full PMTemplateItem object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single PMTemplateItem</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetPMTemplateItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMTemplateItemBiz biz = PMTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) PMTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutPMTemplateItem([FromRoute] long id, [FromBody] PMTemplateItem inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            PMTemplateItemBiz biz = PMTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) PMTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchPMTemplateItem([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<PMTemplateItem> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMTemplateItemBiz biz = PMTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post PMTemplateItem
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostPMTemplateItem([FromBody] PMTemplateItem inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMTemplateItemBiz biz = PMTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            PMTemplateItem o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMTemplateItemController.GetPMTemplateItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate PMTemplateItem
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicatePMTemplateItem([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PMTemplateItemBiz biz = PMTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            PMTemplateItem o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PMTemplateItemController.GetPMTemplateItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete PMTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeletePMTemplateItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PMTemplateItemBiz biz = PMTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/PartController.cs b/server/AyaNova/Controllers/PartController.cs
new file mode 100644
index 00000000..494991a5
--- /dev/null
+++ b/server/AyaNova/Controllers/PartController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class PartController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<PartController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public PartController(AyContext dbcontext, ILogger<PartController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full Part object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single Part</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetPart([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PartBiz biz = PartBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) Part
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutPart([FromRoute] long id, [FromBody] Part inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            PartBiz biz = PartBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) Part
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchPart([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<Part> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PartBiz biz = PartBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post Part
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostPart([FromBody] Part inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PartBiz biz = PartBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            Part o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PartController.GetPart), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate Part
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicatePart([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PartBiz biz = PartBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            Part o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PartController.GetPart), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete Part
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeletePart([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PartBiz biz = PartBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/ProjectController.cs b/server/AyaNova/Controllers/ProjectController.cs
new file mode 100644
index 00000000..1247f5f6
--- /dev/null
+++ b/server/AyaNova/Controllers/ProjectController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class ProjectController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<ProjectController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public ProjectController(AyContext dbcontext, ILogger<ProjectController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full Project object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single Project</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetProject([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            ProjectBiz biz = ProjectBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) Project
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutProject([FromRoute] long id, [FromBody] Project inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            ProjectBiz biz = ProjectBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) Project
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchProject([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<Project> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            ProjectBiz biz = ProjectBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post Project
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostProject([FromBody] Project inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            ProjectBiz biz = ProjectBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            Project o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(ProjectController.GetProject), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate Project
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateProject([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            ProjectBiz biz = ProjectBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            Project o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(ProjectController.GetProject), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete Project
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteProject([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            ProjectBiz biz = ProjectBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/PurchaseOrderController.cs b/server/AyaNova/Controllers/PurchaseOrderController.cs
new file mode 100644
index 00000000..43553cc4
--- /dev/null
+++ b/server/AyaNova/Controllers/PurchaseOrderController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class PurchaseOrderController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<PurchaseOrderController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public PurchaseOrderController(AyContext dbcontext, ILogger<PurchaseOrderController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full PurchaseOrder object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single PurchaseOrder</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetPurchaseOrder([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PurchaseOrderBiz biz = PurchaseOrderBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) PurchaseOrder
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutPurchaseOrder([FromRoute] long id, [FromBody] PurchaseOrder inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            PurchaseOrderBiz biz = PurchaseOrderBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) PurchaseOrder
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchPurchaseOrder([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<PurchaseOrder> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PurchaseOrderBiz biz = PurchaseOrderBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post PurchaseOrder
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostPurchaseOrder([FromBody] PurchaseOrder inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PurchaseOrderBiz biz = PurchaseOrderBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            PurchaseOrder o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PurchaseOrderController.GetPurchaseOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate PurchaseOrder
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicatePurchaseOrder([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            PurchaseOrderBiz biz = PurchaseOrderBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            PurchaseOrder o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(PurchaseOrderController.GetPurchaseOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete PurchaseOrder
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeletePurchaseOrder([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            PurchaseOrderBiz biz = PurchaseOrderBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/QuoteController.cs b/server/AyaNova/Controllers/QuoteController.cs
new file mode 100644
index 00000000..bb3536c8
--- /dev/null
+++ b/server/AyaNova/Controllers/QuoteController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class QuoteController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<QuoteController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public QuoteController(AyContext dbcontext, ILogger<QuoteController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full Quote object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single Quote</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetQuote([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteBiz biz = QuoteBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) Quote
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutQuote([FromRoute] long id, [FromBody] Quote inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            QuoteBiz biz = QuoteBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) Quote
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchQuote([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<Quote> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteBiz biz = QuoteBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post Quote
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostQuote([FromBody] Quote inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteBiz biz = QuoteBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            Quote o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteController.GetQuote), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate Quote
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateQuote([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteBiz biz = QuoteBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            Quote o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteController.GetQuote), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete Quote
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteQuote([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteBiz biz = QuoteBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/QuoteItemController.cs b/server/AyaNova/Controllers/QuoteItemController.cs
new file mode 100644
index 00000000..cd5afbe5
--- /dev/null
+++ b/server/AyaNova/Controllers/QuoteItemController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class QuoteItemController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<QuoteItemController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public QuoteItemController(AyContext dbcontext, ILogger<QuoteItemController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full QuoteItem object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single QuoteItem</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetQuoteItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteItemBiz biz = QuoteItemBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) QuoteItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutQuoteItem([FromRoute] long id, [FromBody] QuoteItem inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            QuoteItemBiz biz = QuoteItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) QuoteItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchQuoteItem([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<QuoteItem> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteItemBiz biz = QuoteItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post QuoteItem
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostQuoteItem([FromBody] QuoteItem inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteItemBiz biz = QuoteItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            QuoteItem o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteItemController.GetQuoteItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate QuoteItem
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateQuoteItem([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteItemBiz biz = QuoteItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            QuoteItem o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteItemController.GetQuoteItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete QuoteItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteQuoteItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteItemBiz biz = QuoteItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/QuoteTemplateController.cs b/server/AyaNova/Controllers/QuoteTemplateController.cs
new file mode 100644
index 00000000..d9e9eb46
--- /dev/null
+++ b/server/AyaNova/Controllers/QuoteTemplateController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class QuoteTemplateController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<QuoteTemplateController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public QuoteTemplateController(AyContext dbcontext, ILogger<QuoteTemplateController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full QuoteTemplate object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single QuoteTemplate</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetQuoteTemplate([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteTemplateBiz biz = QuoteTemplateBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) QuoteTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutQuoteTemplate([FromRoute] long id, [FromBody] QuoteTemplate inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            QuoteTemplateBiz biz = QuoteTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) QuoteTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchQuoteTemplate([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<QuoteTemplate> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteTemplateBiz biz = QuoteTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post QuoteTemplate
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostQuoteTemplate([FromBody] QuoteTemplate inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteTemplateBiz biz = QuoteTemplateBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            QuoteTemplate o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteTemplateController.GetQuoteTemplate), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate QuoteTemplate
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateQuoteTemplate([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteTemplateBiz biz = QuoteTemplateBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            QuoteTemplate o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteTemplateController.GetQuoteTemplate), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete QuoteTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteQuoteTemplate([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteTemplateBiz biz = QuoteTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/QuoteTemplateItemController.cs b/server/AyaNova/Controllers/QuoteTemplateItemController.cs
new file mode 100644
index 00000000..a9166e95
--- /dev/null
+++ b/server/AyaNova/Controllers/QuoteTemplateItemController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class QuoteTemplateItemController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<QuoteTemplateItemController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public QuoteTemplateItemController(AyContext dbcontext, ILogger<QuoteTemplateItemController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full QuoteTemplateItem object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single QuoteTemplateItem</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetQuoteTemplateItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteTemplateItemBiz biz = QuoteTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) QuoteTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutQuoteTemplateItem([FromRoute] long id, [FromBody] QuoteTemplateItem inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            QuoteTemplateItemBiz biz = QuoteTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) QuoteTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchQuoteTemplateItem([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<QuoteTemplateItem> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteTemplateItemBiz biz = QuoteTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post QuoteTemplateItem
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostQuoteTemplateItem([FromBody] QuoteTemplateItem inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteTemplateItemBiz biz = QuoteTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            QuoteTemplateItem o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteTemplateItemController.GetQuoteTemplateItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate QuoteTemplateItem
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateQuoteTemplateItem([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            QuoteTemplateItemBiz biz = QuoteTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            QuoteTemplateItem o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(QuoteTemplateItemController.GetQuoteTemplateItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete QuoteTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteQuoteTemplateItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            QuoteTemplateItemBiz biz = QuoteTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/UnitController.cs b/server/AyaNova/Controllers/UnitController.cs
new file mode 100644
index 00000000..62771d0d
--- /dev/null
+++ b/server/AyaNova/Controllers/UnitController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class UnitController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<UnitController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public UnitController(AyContext dbcontext, ILogger<UnitController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full Unit object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single Unit</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetUnit([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            UnitBiz biz = UnitBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) Unit
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutUnit([FromRoute] long id, [FromBody] Unit inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            UnitBiz biz = UnitBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) Unit
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchUnit([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<Unit> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            UnitBiz biz = UnitBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post Unit
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostUnit([FromBody] Unit inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            UnitBiz biz = UnitBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            Unit o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(UnitController.GetUnit), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate Unit
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateUnit([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            UnitBiz biz = UnitBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            Unit o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(UnitController.GetUnit), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete Unit
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteUnit([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            UnitBiz biz = UnitBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/UnitModelController.cs b/server/AyaNova/Controllers/UnitModelController.cs
new file mode 100644
index 00000000..cee97fef
--- /dev/null
+++ b/server/AyaNova/Controllers/UnitModelController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class UnitModelController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<UnitModelController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public UnitModelController(AyContext dbcontext, ILogger<UnitModelController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full UnitModel object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single UnitModel</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetUnitModel([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            UnitModelBiz biz = UnitModelBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) UnitModel
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutUnitModel([FromRoute] long id, [FromBody] UnitModel inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            UnitModelBiz biz = UnitModelBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) UnitModel
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchUnitModel([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<UnitModel> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            UnitModelBiz biz = UnitModelBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post UnitModel
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostUnitModel([FromBody] UnitModel inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            UnitModelBiz biz = UnitModelBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            UnitModel o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(UnitModelController.GetUnitModel), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate UnitModel
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateUnitModel([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            UnitModelBiz biz = UnitModelBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            UnitModel o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(UnitModelController.GetUnitModel), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete UnitModel
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteUnitModel([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            UnitModelBiz biz = UnitModelBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/VendorController.cs b/server/AyaNova/Controllers/VendorController.cs
new file mode 100644
index 00000000..7b9aad05
--- /dev/null
+++ b/server/AyaNova/Controllers/VendorController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class VendorController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<VendorController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public VendorController(AyContext dbcontext, ILogger<VendorController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full Vendor object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single Vendor</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetVendor([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            VendorBiz biz = VendorBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) Vendor
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutVendor([FromRoute] long id, [FromBody] Vendor inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            VendorBiz biz = VendorBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) Vendor
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchVendor([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<Vendor> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            VendorBiz biz = VendorBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post Vendor
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostVendor([FromBody] Vendor inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            VendorBiz biz = VendorBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            Vendor o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(VendorController.GetVendor), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate Vendor
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateVendor([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            VendorBiz biz = VendorBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            Vendor o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(VendorController.GetVendor), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete Vendor
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteVendor([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            VendorBiz biz = VendorBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/WorkOrderController.cs b/server/AyaNova/Controllers/WorkOrderController.cs
new file mode 100644
index 00000000..75089ffa
--- /dev/null
+++ b/server/AyaNova/Controllers/WorkOrderController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class WorkOrderController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<WorkOrderController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public WorkOrderController(AyContext dbcontext, ILogger<WorkOrderController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full WorkOrder object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single WorkOrder</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetWorkOrder([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) WorkOrder
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutWorkOrder([FromRoute] long id, [FromBody] WorkOrder inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) WorkOrder
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchWorkOrder([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<WorkOrder> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post WorkOrder
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostWorkOrder([FromBody] WorkOrder inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            WorkOrder o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderController.GetWorkOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate WorkOrder
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateWorkOrder([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            WorkOrder o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderController.GetWorkOrder), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete WorkOrder
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteWorkOrder([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderBiz biz = WorkOrderBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/WorkOrderItemController.cs b/server/AyaNova/Controllers/WorkOrderItemController.cs
new file mode 100644
index 00000000..941ed338
--- /dev/null
+++ b/server/AyaNova/Controllers/WorkOrderItemController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class WorkOrderItemController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<WorkOrderItemController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public WorkOrderItemController(AyContext dbcontext, ILogger<WorkOrderItemController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full WorkOrderItem object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single WorkOrderItem</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetWorkOrderItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderItemBiz biz = WorkOrderItemBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) WorkOrderItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutWorkOrderItem([FromRoute] long id, [FromBody] WorkOrderItem inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            WorkOrderItemBiz biz = WorkOrderItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) WorkOrderItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchWorkOrderItem([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<WorkOrderItem> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderItemBiz biz = WorkOrderItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post WorkOrderItem
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostWorkOrderItem([FromBody] WorkOrderItem inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderItemBiz biz = WorkOrderItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            WorkOrderItem o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderItemController.GetWorkOrderItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate WorkOrderItem
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateWorkOrderItem([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderItemBiz biz = WorkOrderItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            WorkOrderItem o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderItemController.GetWorkOrderItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete WorkOrderItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteWorkOrderItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderItemBiz biz = WorkOrderItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/WorkOrderTemplateController.cs b/server/AyaNova/Controllers/WorkOrderTemplateController.cs
new file mode 100644
index 00000000..030a83d4
--- /dev/null
+++ b/server/AyaNova/Controllers/WorkOrderTemplateController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class WorkOrderTemplateController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<WorkOrderTemplateController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public WorkOrderTemplateController(AyContext dbcontext, ILogger<WorkOrderTemplateController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full WorkOrderTemplate object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single WorkOrderTemplate</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetWorkOrderTemplate([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateBiz biz = WorkOrderTemplateBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) WorkOrderTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutWorkOrderTemplate([FromRoute] long id, [FromBody] WorkOrderTemplate inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            WorkOrderTemplateBiz biz = WorkOrderTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) WorkOrderTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchWorkOrderTemplate([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<WorkOrderTemplate> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateBiz biz = WorkOrderTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post WorkOrderTemplate
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostWorkOrderTemplate([FromBody] WorkOrderTemplate inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateBiz biz = WorkOrderTemplateBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            WorkOrderTemplate o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderTemplateController.GetWorkOrderTemplate), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate WorkOrderTemplate
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateWorkOrderTemplate([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateBiz biz = WorkOrderTemplateBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            WorkOrderTemplate o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderTemplateController.GetWorkOrderTemplate), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete WorkOrderTemplate
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteWorkOrderTemplate([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateBiz biz = WorkOrderTemplateBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file
diff --git a/server/AyaNova/Controllers/WorkOrderTemplateItemController.cs b/server/AyaNova/Controllers/WorkOrderTemplateItemController.cs
new file mode 100644
index 00000000..a76f6cd1
--- /dev/null
+++ b/server/AyaNova/Controllers/WorkOrderTemplateItemController.cs
@@ -0,0 +1,270 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using AyaNova.Models;
+using AyaNova.Api.ControllerHelpers;
+using AyaNova.Biz;
+
+
+namespace AyaNova.Api.Controllers
+{
+
+    [ApiController]
+    [ApiVersion("8.0")]
+    [Route("api/v{version:apiVersion}/[controller]")]
+    [Produces("application/json")]
+    [Authorize]
+    public class WorkOrderTemplateItemController : ControllerBase
+    {
+        private readonly AyContext ct;
+        private readonly ILogger<WorkOrderTemplateItemController> log;
+        private readonly ApiServerState serverState;
+
+
+        /// <summary>
+        /// ctor
+        /// </summary>
+        /// <param name="dbcontext"></param>
+        /// <param name="logger"></param>
+        /// <param name="apiServerState"></param>  
+        public WorkOrderTemplateItemController(AyContext dbcontext, ILogger<WorkOrderTemplateItemController> logger, ApiServerState apiServerState)
+        {
+            ct = dbcontext;
+            log = logger;
+            serverState = apiServerState;
+        }
+
+
+        /// <summary>
+        /// Get full WorkOrderTemplateItem object
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>A single WorkOrderTemplateItem</returns>
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetWorkOrderTemplateItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateItemBiz biz = WorkOrderTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //NOTE: This is the first check and often the only check but in some cases with some objects this will also need to check biz object rules 
+            if (!Authorized.HasReadFullRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var o = await biz.GetAsync(id);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            // NOTE: HERE would be the second check of biz rules before returning the object
+            // in cases where there is also a business rule to affect retrieval on top of basic rights
+
+            return Ok(ApiOkResponse.Response(o, !Authorized.HasModifyRole(HttpContext.Items, biz.BizType)));
+        }
+
+
+
+        /// <summary>
+        /// Put (update) WorkOrderTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="inObj"></param>
+        /// <returns></returns>
+        [HttpPut("{id}")]
+        public async Task<IActionResult> PutWorkOrderTemplateItem([FromRoute] long id, [FromBody] WorkOrderTemplateItem inObj)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler       
+            WorkOrderTemplateItemBiz biz = WorkOrderTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                if (!await biz.PutAsync(o, inObj))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+
+        /// <summary>
+        /// Patch (update) WorkOrderTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <param name="concurrencyToken"></param>
+        /// <param name="objectPatch"></param>
+        /// <returns></returns>
+        [HttpPatch("{id}/{concurrencyToken}")]
+        public async Task<IActionResult> PatchWorkOrderTemplateItem([FromRoute] long id, [FromRoute] uint concurrencyToken, [FromBody]JsonPatchDocument<WorkOrderTemplateItem> objectPatch)
+        {
+            //https://dotnetcoretutorials.com/2017/11/29/json-patch-asp-net-core/
+
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateItemBiz biz = WorkOrderTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasModifyRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            try
+            {
+                //patch and validate
+                if (!await biz.PatchAsync(o, objectPatch, concurrencyToken))
+                    return BadRequest(new ApiErrorResponse(biz.Errors));
+            }
+            catch (DbUpdateConcurrencyException)
+            {
+                if (!await biz.ExistsAsync(id))
+                    return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+                else
+                    return StatusCode(409, new ApiErrorResponse(ApiErrorCode.CONCURRENCY_CONFLICT));
+            }
+            return Ok(ApiOkResponse.Response(new { ConcurrencyToken = o.ConcurrencyToken }, true));
+        }
+
+
+        /// <summary>
+        /// Post WorkOrderTemplateItem
+        /// </summary>
+        /// <param name="inObj"></param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost]
+        public async Task<IActionResult> PostWorkOrderTemplateItem([FromBody] WorkOrderTemplateItem inObj, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateItemBiz biz = WorkOrderTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Create and validate
+            WorkOrderTemplateItem o = await biz.CreateAsync(inObj);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderTemplateItemController.GetWorkOrderTemplateItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+
+        }
+
+        /// <summary>
+        /// Duplicate WorkOrderTemplateItem
+        /// </summary>
+        /// <param name="id">Create a duplicate of this items id</param>
+        /// <param name="apiVersion">Automatically filled from route path, no need to specify in body</param>
+        /// <returns></returns>
+        [HttpPost("duplicate/{id}")]
+        public async Task<IActionResult> DuplicateWorkOrderTemplateItem([FromRoute] long id, ApiVersion apiVersion)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateItemBiz biz = WorkOrderTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            //If a user has change roles
+            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            var oSrc = await biz.GetAsync(id, false);
+            if (oSrc == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            //Create and validate
+            WorkOrderTemplateItem o = await biz.DuplicateAsync(oSrc);
+            if (o == null)
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+            else
+                return CreatedAtAction(nameof(WorkOrderTemplateItemController.GetWorkOrderTemplateItem), new { id = o.Id, version = apiVersion.ToString() }, new ApiCreatedResponse(o));
+
+        }
+
+
+
+        /// <summary>
+        /// Delete WorkOrderTemplateItem
+        /// </summary>
+        /// <param name="id"></param>
+        /// <returns>Ok</returns>
+        [HttpDelete("{id}")]
+        public async Task<IActionResult> DeleteWorkOrderTemplateItem([FromRoute] long id)
+        {
+            if (!serverState.IsOpen)
+                return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
+
+            if (!ModelState.IsValid)
+                return BadRequest(new ApiErrorResponse(ModelState));
+
+            //Instantiate the business object handler
+            WorkOrderTemplateItemBiz biz = WorkOrderTemplateItemBiz.GetBiz(ct, HttpContext);
+
+            var o = await biz.GetAsync(id, false);
+            if (o == null)
+                return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
+
+            if (!Authorized.HasDeleteRole(HttpContext.Items, biz.BizType))
+                return StatusCode(403, new ApiNotAuthorizedResponse());
+
+            if (!await biz.DeleteAsync(o))
+                return BadRequest(new ApiErrorResponse(biz.Errors));
+
+            return NoContent();
+        }
+
+
+
+
+
+        //------------
+
+
+    }//eoc
+}//eons
\ No newline at end of file